This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa
File:                     3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa (raw, json)
Hash identifier:          j5borvIgjotWQ92+vPRSlxUfz7IOQtoG2WJTyai460I=
Subject key identifier:   D4:8D:EE:A1:89:9E:BF:01:5E:AE:17:0C:A1:CE:F0:CB:C9:AD:99:57
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       3075A05FC2A1B3F04586CC6AC26157721097488C
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa
Signing time:             Tue 20 Jan 2026 02:19:12 +0000
ROA not before:           Tue 20 Jan 2026 02:14:12 +0000
ROA not after:            Tue 19 Jan 2027 02:19:12 +0000
asID:                     140293
IP address blocks:        118.184.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:75:a0:5f:c2:a1:b3:f0:45:86:cc:6a:c2:61:57:72:10:97:48:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Jan 20 02:14:12 2026 GMT
            Not After : Jan 19 02:19:12 2027 GMT
        Subject: CN=D48DEEA1899EBF015EAE170CA1CEF0CBC9AD9957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:96:81:a8:dd:5d:db:c1:9f:ba:37:6f:01:
                    f2:5e:f4:77:64:3e:90:24:76:ad:1d:63:c2:9a:bc:
                    6a:ee:12:4c:bb:ed:19:03:59:a8:08:ab:cc:11:6c:
                    1f:d3:2a:8d:b4:28:ed:c0:1e:cd:76:6f:a2:60:d5:
                    7a:86:6b:0c:e2:0a:0b:b1:ca:0f:bd:70:57:5d:cb:
                    98:87:55:7b:a9:19:f5:3e:0e:8e:3b:80:e7:54:4a:
                    ca:e8:df:c8:0e:b0:28:7a:7f:43:31:d3:7c:86:ce:
                    cd:13:7a:5b:5a:29:dd:56:87:77:c9:95:48:64:d7:
                    96:e6:39:36:23:cb:94:c5:6a:5e:61:ce:59:0a:88:
                    d0:4a:6c:8b:aa:42:5a:8f:2b:70:0e:eb:3a:ac:23:
                    9d:b4:15:99:f4:62:10:b1:4b:52:57:c8:11:1c:90:
                    04:78:cd:cf:e3:ac:c0:02:85:7f:d1:b5:48:b0:7c:
                    f3:9d:be:99:17:b5:cc:f5:8c:22:01:0b:aa:97:5a:
                    4a:bd:1f:a2:67:a3:42:e1:a6:81:4c:98:bf:cd:e8:
                    48:1d:1e:95:f3:6c:59:71:e5:b2:ae:67:38:30:25:
                    89:e7:df:e6:30:5a:ef:e6:87:43:93:85:23:39:e9:
                    a1:47:0f:e9:d9:6d:e6:fe:8d:b0:e1:4f:7e:d4:e8:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:EE:A1:89:9E:BF:01:5E:AE:17:0C:A1:CE:F0:CB:C9:AD:99:57
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f31372d3234203d3e20313430323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.184.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:a9:a8:47:d7:37:4a:45:2d:c4:d8:9a:56:68:7d:7d:44:cd:
         5a:52:49:e8:b3:fe:c0:ff:ad:24:bc:bf:7c:f5:fa:ca:03:4f:
         3b:93:e8:07:87:ae:70:9a:22:11:a1:4e:00:0f:82:05:97:32:
         61:70:05:15:2b:ac:00:5b:f9:27:19:ef:66:0a:77:fd:21:14:
         e6:62:49:e8:d3:84:6a:4f:04:8a:81:fb:0d:0a:2b:1e:11:c4:
         46:f3:0a:2b:d7:39:b8:aa:8e:3d:e7:0c:34:02:1a:5a:96:22:
         71:e1:69:e1:4f:8a:28:b3:67:c8:28:d3:df:fc:56:49:3d:e5:
         4e:c5:a0:3f:c7:39:3f:3b:65:72:be:2a:0e:41:3f:c4:d9:b8:
         c7:73:2d:c2:02:16:e7:85:b5:e0:98:38:c7:f8:98:07:fb:28:
         a5:1c:a1:9d:2d:56:3e:1f:9e:34:bc:23:25:c2:7f:65:18:b7:
         7b:ed:42:a7:cd:18:d6:28:56:10:91:8f:4e:72:29:58:06:10:
         27:d0:a6:d0:9b:4b:5f:42:17:20:f4:a3:ba:06:3d:63:f5:3d:
         0a:a1:69:60:06:01:8f:f3:bb:a0:1a:8b:5a:f8:84:56:14:ef:
         90:81:c5:e5:84:72:50:a8:1c:01:e3:fc:7d:25:bf:6f:02:30:
         88:96:a1:21
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUMHWgX8Khs/BFhsxqwmFXchCXSIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2
QUMwMkQwNDAeFw0yNjAxMjAwMjE0MTJaFw0yNzAxMTkwMjE5MTJaMDMxMTAvBgNV
BAMTKEQ0OERFRUExODk5RUJGMDE1RUFFMTcwQ0ExQ0VGMENCQzlBRDk5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/paBqN1d28GfujdvAfJe9Hdk
PpAkdq0dY8KavGruEky77RkDWagIq8wRbB/TKo20KO3AHs12b6Jg1XqGawziCgux
yg+9cFddy5iHVXupGfU+Do47gOdUSsro38gOsCh6f0Mx03yGzs0TeltaKd1Wh3fJ
lUhk15bmOTYjy5TFal5hzlkKiNBKbIuqQlqPK3AO6zqsI520FZn0YhCxS1JXyBEc
kAR4zc/jrMAChX/RtUiwfPOdvpkXtcz1jCIBC6qXWkq9H6Jno0LhpoFMmL/N6Egd
HpXzbFlx5bKuZzgwJYnn3+YwWu/mh0OThSM56aFHD+nZbeb+jbDhT37U6NutAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU1I3uoYmevwFerhcMoc7wy8mtmVcwHwYDVR0j
BBgwFoAUUKUXGUH3FfrNz53Ub6Z0BGrALQQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njk5NTcxMy8wLzUwQTUxNzE5NDFGNzE1RkFDRENGOURENDZGQTY3
NDA0NkFDMDJEMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTBBNTE3MTk0MUY3MTVGQUNEQ0Y5REQ0NkZBNjc0MDQ2QUMwMkQwNC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2OTk1NzEzLzAvMzEzMTM4MmUz
MTM4MzQyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzQzMDMyMzkz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB3a4gDANBgkqhkiG9w0BAQsFAAOCAQEAZKmoR9c3SkUtxNia
Vmh9fUTNWlJJ6LP+wP+tJLy/fPX6ygNPO5PoB4eucJoiEaFOAA+CBZcyYXAFFSus
AFv5JxnvZgp3/SEU5mJJ6NOEak8EioH7DQorHhHERvMKK9c5uKqOPecMNAIaWpYi
ceFp4U+KKLNnyCjT3/xWST3lTsWgP8c5Pztlcr4qDkE/xNm4x3MtwgIW54W14Jg4
x/iYB/sopRyhnS1WPh+eNLwjJcJ/ZRi3e+1Cp80Y1ihWEJGPTnIpWAYQJ9Cm0JtL
X0IXIPSjugY9Y/U9CqFpYAYBj/O7oBqLWviEVhTvkIHF5YRyUKgcAeP8fSW/bwIw
iJahIQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:22:33 2026 by rpki-client